1 1. A method of preventing the repudiation of digitally-signed electronic documents, 

2 the method comprising the steps of: 

3 receiving a plurality of electronic documents during a first and second time 

4 interval; 

5 forming a message digest for each of the plurality of electronic documents; 

6 forming a first super-message digest derived at least in part from each of the 

7 message digests received during the first time interval; 

8 forming a second super-message digest derived at least in part from each of the 

9 message digests received during the second time interval and from the first super- 

10 message digest; 

1 1 transmitting the second super-message digest to a timestamp authority and 

12 receiving a timestamp therefrom; and 

13 recording each of the message digests, first and second super-message digests, 

14 and timestamp in an audit log. 

1 2. The method of claim 1 wherein at least one of the plurality of electronic 

2 documents corresponds to a file attachment in an electronic mail message. 

1 3. The method of claim 1 wherein the first and second time intervals are pre- 

2 determined. 
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1 4. The method of claim 1 wherein the duration of the first and second time intervals 

2 are dynamically determined from a number of electronic documents anticipated during a 

3 particular time of day. 

1 5. The method of claim 1 further comprising the step of recording a timestamp 

2 associated with the first super-message digest in the audit log. 

1 6. The method of claim 5 wherein the first super-message digest is further derived 

2 from the timestamp associated with the first super-message digest and from a prior super- 
4 3 message digest. 

2 1 7. The method of claim 5 wherein the second super-message digest is further derived 

%J 2 from the timestamp associated with the first super-message digest. 



1 8. A method of securely delivering an electronic document, the method comprising 

2 the steps of: 



3 



at a message server associated with a sender of the electronic document, 



4 



computing a symmetric key from message parameters associated with the 



5 



electronic document and from a hidden parameter associated with the message server 



6 



using a predefined algorithm; 



7 



encrypting the electronic document using the symmetric key; 



8 



transmitting the encrypted electronic document and the message parameters to at 



9 



least one recipient; 



at a web server coupled to the recipient of the encrypted electronic document, 

receiving identification data associated with the recipient; 

receiving the message parameters transmitted to the recipient; 

comparing the identification data associated with the recipient with the received 
message parameters; 

upon matching the identification data with at least some of the received message 
parameters, dynamically computing the symmetric key from the received message 
parameters and the hidden parameter associated with the message server using the 
predefined algorithm; and 

providing the symmetric key to the recipient. 

9. The method of claim 8 wherein the electronic document is digitally signed. 

1 0. The method of claim 8 wherein the message parameters include a recipient list 
and a hash of the electronic document. 

1 1 . The method of claim 8 wherein the electronic document and message parameters 
are transmitted to the recipient in an electronic mail message. 

12. The method of claim 1 1 wherein the received message parameters are posted to 
the web server via an HTML form included in the electronic mail message. 
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13. The method of claim 8 wherein the identification data includes a user ID and 
password previously registered by the web server. 



1 14. The method of claim 8 wherein the message server and the web server are 

2 controlled by the sender of the electronic document. 

1 15. A method of securely delivering an electronic document via a web server, the 

2 method comprising the steps of: 

3 receiving a symmetrically encrypted electronic document and parameters 
C 4 associated therewith, the parameters including a recipient list associated with the 
J1 5 electronic document; 

2 6 receiving identification data from the recipient via a communications network and 

y 7 comparing at least some of the received parameters therewith; 

M* 8 upon matching the identification data and the at least some of the received 

asss. 

F? 9 parameters, dynamically computing a symmetric key from the received parameters; 
H 10 decrypting the electronic document using the symmetric key; and 

1 1 displaying the decrypted document on a web page accessible to the recipient. 

1 16. The method of claim 1 5 further comprising the step of transmitting a message to 

2 a sender of the symmetrically encrypted electronic document after matching the 

3 identification data and the received parameters. 
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